Question

Difficulty: MediumWindows OS Editions and Basic Features

A network administrator is deploying new endpoint security controls across a corporation. The security policy requires restricting application execution based on digital signatures, publisher rules, and file hashes using AppLocker. Which operating system edition is the MINIMUM requirement on client workstations to support AppLocker policy enforcement?

  1. A
    Windows 11 Home
  2. B
    Windows 11 Pro
  3. Windows 11 EnterpriseAnswer
  4. D
    Windows 11 Pro for Workstations

Answer

Windows 11 Enterprise is the minimum edition required to enforce AppLocker policies.
AppLocker enforcement is an enterprise-specific capability available in Windows 11 Enterprise and Education editions. It allows organizations to restrict application execution by hash, path, or publisher criteria.

Step-by-Step Solution

1
Identify the key technical requirement in the scenario.
The scenario specifically requires enforcing application control policies using AppLocker.
AppLocker allows administrators to specify which users or groups can run specific applications based on unique file identity attributes.
2
Evaluate edition feature boundaries for Windows 11.
Windows 11 Home and Pro editions do not support AppLocker policy enforcement.
AppLocker management is classified as an enterprise-grade security feature reserved for Enterprise and Education editions.
3
Select the minimum compliant Windows edition.
Windows 11 Enterprise fulfills the AppLocker security requirement.
It is the lowest-tier edition in the provided options that natively includes full AppLocker capability.

Key Concept

Windows Edition Feature Boundaries (AppLocker Support)
Estimated Time:1m 0s
Rate this question